2008年4月27日 星期日

The Internal Logic for Refresh of Security cache

Refreshing the security cache after changing the security settings is very important.
Both security windows Security Permissions and Grant Administration
include the possibility to refresh the cache.

The operation of refreshing the security cache consists of the following steps:

  1. Remove method restriction entries in table SECURITY_SYS_TAB where no grants
    for the corresponding package are found in USER_TAB_PRIVS_MADE.

  2. Copy package and view grants from USER_TAB_PRIVS_MADE to SECURITY_SYS_PRIVS_TAB.

  3. Synchronize the contents of FND_USER_ROLE_TAB and SYS.DBA_ROLE_PRIVS (upgrade issue).

  4. Update the table SECURITY_SYS_RPRIVS_COPY_TAB according to SYS.DBA_ROLE_PRIVS and FND_USER_ROLE_TAB to be used
    for performance boost of the next step.

  5. Update the expanded role lists in tables FND_USER_ROLE_RUNTIME_TAB
    and SECURITY_SYS_ROLE_PRIVS_TAB
    by using non-expanded role relations in SYS.DBA_ROLE_PRIVS.
    (above is a example of IFS-2001 etc)